For running a production LDAP service, I near always recommend building and maintaining it yourself.
I'm interested in the exceptions you have in mind with "near always".
What do you think about building via ports on *BSD systems (pkgsrc on NetBSD) ? AFAICT it generally produces a resonably up-to-date release (provided you have an up-to-date port tree of course).
Best regards, Thierry